So you're building an API? Have you thought about how you're going to secure it to keep the data of your users safe?
It doesn't matter if it is REST, SOAP, or something modern like GraphQL, security is often overlooked or an after-thought during development. Do you encrypt your data in the database and if so, which data should be encrypted? Do you limit who has access to the data through API endpoints and query-able fields and if so, are you using something like JSON Web Tokens (JWT), OAuth, or something else? There's a lot to consider for API security, far beyond the points listed here.
In this session, we'll explore five (5) key components that you can apply in your project to strengthen the security of your API. In the process we'll be using the Go programming language (Golang) and see live demos on how the various techniques can be applied. We'll even see how they were used in the secure file sharing service ybits.io.
Disclaimer: This talk does not reflect the views of my current or previous employer(s) and there is no affiliation with them either. These are on my own!
Speaker
Alain Mbuku - Senior Security Engineer at CircleCI
About the Speaker
My name is Alain Mbuku, Senior Security Engineer at CircleCI as part of the Security Operations Engineering.
In my spare time, I occasionally write about things that interest me in information technology with focus on security and encryption. You can learn more on my blog.
I love performance cars, I am currently building my 2016 328i xDrve to reach 400 horse power. Subscribe to my channel on YouTube to stay updated about any progress I make.
Fun fact, I am fluent in five (5) languages and I've often been asked in what language do I think. Well, that depends on the situation, but it's fun because sometimes I can start speaking in English and finish the sentence in French or Swahili.
Connect with me on LinkedIn and on Twitter.
Location
Live-Streamed Remotely on YouTube
https://www.youtube.com/watch?v=BNUD0RfAK70
Basic Information
Due to COVID-19 and everyone's personal safety, we're making this event an online stream through YouTube. You don't need an account to watch the stream, but you'll need one to participate in the chat. Creating an account doesn't cost anything and it will add warmth to the event.